|
 |
f24a48 |
%global with_debug 1
|
|
|
f24a48 |
%global with_check 0
|
|
|
f24a48 |
|
|
|
f24a48 |
%if 0%{?with_debug}
|
|
|
c8282c |
%global _find_debuginfo_dwz_opts %{nil}
|
|
|
f24a48 |
%global _dwz_low_mem_die_limit 0
|
|
|
f24a48 |
%else
|
|
|
c6b183 |
%global debug_package %{nil}
|
|
|
f24a48 |
%endif
|
|
|
f24a48 |
|
|
|
f24a48 |
%if ! 0%{?gobuild:1}
|
|
|
4a06b3 |
%define gobuild(o:) \
|
|
|
c6b183 |
go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -extldflags '%__global_ldflags'" -a -v -x %{?**};
|
|
|
f24a48 |
%endif
|
|
|
f24a48 |
|
|
|
c6b183 |
%global provider github
|
|
|
c6b183 |
%global provider_tld com
|
|
|
c6b183 |
%global project opencontainers
|
|
|
c6b183 |
%global repo runc
|
|
|
f24a48 |
# https://github.com/opencontainers/runc
|
|
|
c6b183 |
%global import_path %{provider}.%{provider_tld}/%{project}/%{repo}
|
|
|
c6b183 |
%global git0 https://%{import_path}
|
|
|
c6b183 |
%global commit0 425e105d5a03fabd737a126ad93d62a9eeede87f
|
|
|
c6b183 |
%global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
|
|
|
f24a48 |
|
|
|
f24a48 |
Name: %{repo}
|
|
|
f24a48 |
Version: 1.0.0
|
|
|
c6b183 |
Release: 64.rc8%{?dist}
|
|
|
f24a48 |
Summary: CLI for running Open Containers
|
|
|
f24a48 |
License: ASL 2.0
|
|
|
c6b183 |
URL: %{git0}
|
|
|
c6b183 |
Source0: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
|
|
|
f24a48 |
Source1: 99-containers.conf
|
|
|
c6b183 |
Patch0: 1807.patch
|
|
|
c6b183 |
Patch1: change-default-root.patch
|
|
|
f24a48 |
Requires: criu
|
|
|
f24a48 |
Requires(pre): container-selinux >= 2:2.2-2
|
|
|
4db318 |
ExclusiveArch: aarch64 %{arm} ppc64le s390x x86_64
|
|
|
4a06b3 |
BuildRequires: go-toolset-1.10
|
|
|
4a06b3 |
BuildRequires: openssl-devel
|
|
|
f24a48 |
BuildRequires: git
|
|
|
f24a48 |
BuildRequires: go-md2man
|
|
|
f24a48 |
BuildRequires: libseccomp-devel
|
|
|
f24a48 |
|
|
|
f24a48 |
%description
|
|
|
f24a48 |
The runc command can be used to start containers which are packaged
|
|
|
f24a48 |
in accordance with the Open Container Initiative's specifications,
|
|
|
f24a48 |
and to manage containers running under runc.
|
|
|
f24a48 |
|
|
|
c8282c |
# Go Toolset
|
|
|
c6b183 |
%{?enable_gotoolset110}
|
|
|
c8282c |
|
|
|
f24a48 |
%prep
|
|
|
c6b183 |
%autosetup -Sgit -n %{name}-%{commit0}
|
|
|
f24a48 |
|
|
|
f24a48 |
%build
|
|
|
f24a48 |
mkdir -p GOPATH
|
|
|
f24a48 |
pushd GOPATH
|
|
|
f24a48 |
mkdir -p src/%{provider}.%{provider_tld}/%{project}
|
|
|
f24a48 |
ln -s $(dirs +1 -l) src/%{import_path}
|
|
|
f24a48 |
popd
|
|
|
f24a48 |
|
|
|
f24a48 |
pushd GOPATH/src/%{import_path}
|
|
|
4db318 |
export GOPATH=$(pwd)/GOPATH
|
|
|
f24a48 |
export BUILDTAGS='selinux seccomp'
|
|
|
4a06b3 |
%gobuild -o %{name} %{import_path}
|
|
|
f24a48 |
|
|
|
f24a48 |
pushd man
|
|
|
f24a48 |
./md2man-all.sh
|
|
|
f24a48 |
popd
|
|
|
f24a48 |
|
|
|
f24a48 |
%install
|
|
|
f24a48 |
install -d -p %{buildroot}%{_bindir}
|
|
|
f24a48 |
install -p -m 755 %{name} %{buildroot}%{_bindir}
|
|
|
f24a48 |
|
|
|
f24a48 |
install -d -p %{buildroot}%{_mandir}/man8
|
|
|
f24a48 |
install -p -m 644 man/man8/* %{buildroot}%{_mandir}/man8
|
|
|
f24a48 |
|
|
|
f24a48 |
install -d -p %{buildroot}%{_usr}/lib/sysctl.d
|
|
|
f24a48 |
install -p -m 644 %{SOURCE1} %{buildroot}%{_usr}/lib/sysctl.d
|
|
|
f24a48 |
|
|
|
f24a48 |
%check
|
|
|
c6b183 |
%if 0%{?with_check}
|
|
|
f24a48 |
export GOPATH=%{buildroot}/%{gopath}:$(pwd)/Godeps/_workspace:%{gopath}
|
|
|
f24a48 |
|
|
|
f24a48 |
%if ! 0%{?gotest:1}
|
|
|
f24a48 |
%global gotest go test
|
|
|
f24a48 |
%endif
|
|
|
f24a48 |
|
|
|
f24a48 |
# FAIL: TestFactoryNewTmpfs (0.00s), factory_linux_test.go:59: operation not permitted
|
|
|
f24a48 |
#%%gotest %%{import_path}/libcontainer
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/cgroups
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/cgroups/fs
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/configs
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/devices
|
|
|
f24a48 |
# undefined reference to `nsexec'
|
|
|
f24a48 |
#%%gotest %%{import_path}/libcontainer/integration
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/label
|
|
|
f24a48 |
# Unable to create tstEth link: operation not permitted
|
|
|
f24a48 |
#%%gotest %%{import_path}/libcontainer/netlink
|
|
|
f24a48 |
# undefined reference to `nsexec'
|
|
|
f24a48 |
#%%gotest %%{import_path}/libcontainer/nsenter
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/selinux
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/stacktrace
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/user
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/utils
|
|
|
f24a48 |
%gotest %{import_path}/libcontainer/xattr
|
|
|
f24a48 |
%endif
|
|
|
f24a48 |
|
|
|
f24a48 |
#define license tag if not already defined
|
|
|
f24a48 |
%{!?_licensedir:%global license %doc}
|
|
|
f24a48 |
|
|
|
f24a48 |
%post
|
|
|
f24a48 |
%sysctl_apply 99-containers.conf
|
|
|
f24a48 |
|
|
|
f24a48 |
%files
|
|
|
f24a48 |
%license LICENSE
|
|
|
f24a48 |
%doc MAINTAINERS_GUIDE.md PRINCIPLES.md README.md CONTRIBUTING.md
|
|
|
f24a48 |
%{_bindir}/%{name}
|
|
|
f24a48 |
%{_mandir}/man8/%{name}*
|
|
|
f24a48 |
%{_usr}/lib/sysctl.d/99-containers.conf
|
|
|
f24a48 |
|
|
|
c6b183 |
%changelog
|
|
|
c6b183 |
* Thu Jul 11 2019 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-64.rc8
|
|
|
c6b183 |
- Resolves: #1728762 - update change-default-root.patch
|
|
|
f24a48 |
|
|
|
c6b183 |
* Thu Jul 04 2019 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-63.rc8
|
|
|
c6b183 |
- Resolves: #1724778
|
|
|
c6b183 |
|
|
|
c6b183 |
* Tue Jun 25 2019 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-62.rc8
|
|
|
c6b183 |
- Resolves: #1723480
|
|
|
c6b183 |
- bump to v1.0.0-rc8
|
|
|
c6b183 |
|
|
|
c6b183 |
* Fri Jun 07 2019 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-61.dev.git2abd837
|
|
|
c6b183 |
- Resolves: #1676705 - correct URL field
|
|
|
c6b183 |
|
|
|
c6b183 |
* Mon Feb 11 2019 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-60.dev.git2abd837
|
|
|
c6b183 |
- update golang toolchain macros
|
|
|
f24a48 |
|
|
|
bcd21b |
* Fri Feb 08 2019 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-59.dev.git2abd837
|
|
|
bcd21b |
- Resolves: #1664908
|
|
|
bcd21b |
- CVE-2019-5736
|
|
|
bcd21b |
|
|
|
bcd21b |
* Fri Feb 08 2019 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-58.dev.git2abd837
|
|
|
bcd21b |
- Resolves: #1664908
|
|
|
bcd21b |
|
|
|
4a06b3 |
* Wed Nov 28 2018 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-57.dev.git2abd837
|
|
|
4a06b3 |
- Resolves: #1650512 - build with the right golang dependency
|
|
|
4a06b3 |
|
|
|
4a06b3 |
* Wed Nov 21 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-56.dev.git2abd837
|
|
|
4a06b3 |
- openssl-devel required only with scl go toolset
|
|
|
4a06b3 |
|
|
|
4a06b3 |
* Thu Nov 08 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-55.dev.git2abd837
|
|
|
4a06b3 |
- buildrequires for centos
|
|
|
4a06b3 |
|
|
|
4db318 |
* Wed Sep 26 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-54.dev.git2abd837
|
|
|
4db318 |
- 1807.patch added
|
|
|
4db318 |
|
|
|
4db318 |
* Wed Sep 26 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-53.dev.git2abd837
|
|
|
4db318 |
- rebuilt
|
|
|
4db318 |
|
|
|
6752f3 |
* Mon Sep 10 2018 Lokesh Mandvekar <lsm5@redhat.com> - 2:1.0.0-52.dev.git70ca035
|
|
|
6752f3 |
- built commit 70ca035 with additional patches to change default root and
|
|
|
6752f3 |
to revert apply cgroups earlier
|
|
|
6752f3 |
|
|
|
4db318 |
* Thu Sep 06 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-52.dev.gitfdd8055
|
|
|
4db318 |
- FTBFS
|
|
|
4db318 |
|
|
|
6752f3 |
* Fri Aug 31 2018 Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-51.dev.gitfdd8055
|
|
|
6752f3 |
- Fix handling of tmpcopyup
|
|
|
6752f3 |
|
|
|
c8282c |
* Tue Aug 14 2018 Lokesh Mandvekar <lsm5@redhat.com> - 2:1.0.0-37.gitad0f525
|
|
|
c8282c |
- Resolves: #1616112
|
|
|
c8282c |
|
|
|
c8282c |
* Fri Jun 15 2018 Dan Walsh <dwalsh@redhat.com> - 2:1.0.0-36.gitb222ea4
|
|
|
c8282c |
- Better handling of user namespace
|
|
|
c8282c |
|
|
|
c8282c |
* Tue May 1 2018 Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-31.rc5.git0cbfd83
|
|
|
c8282c |
- Fix issues between SELinux and UserNamespace
|
|
|
c8282c |
|
|
|
40f8a5 |
* Tue Apr 17 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-27.rc5.dev.git4bb1fe4
|
|
|
40f8a5 |
- rebuilt, placed missing changelog entry back
|
|
|
40f8a5 |
|
|
|
40f8a5 |
* Tue Feb 27 2018 Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-26.rc5.git4bb1fe4
|
|
|
40f8a5 |
- release v1.0.0~rc5
|
|
|
40f8a5 |
|
|
|
2ffe8f |
* Wed Jan 24 2018 Dan Walsh <dwalsh@redhat.name> - 1.0.0-26.rc4.git9f9c962
|
|
|
2ffe8f |
- Bump to the latest from upstream
|
|
|
2ffe8f |
|
|
|
2ffe8f |
* Mon Dec 18 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-25.rc4.gite6516b3
|
|
|
2ffe8f |
- built commit e6516b3
|
|
|
2ffe8f |
|
|
|
2ffe8f |
* Fri Dec 15 2017 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-24.rc4.dev.gitc6e4a1e.1
|
|
|
2ffe8f |
- rebase to c6e4a1ebeb1a72b529c6f1b6ee2b1ae5b868b14f
|
|
|
2ffe8f |
- https://github.com/opencontainers/runc/pull/1651
|
|
|
2ffe8f |
|
|
|
efbbe3 |
* Tue Dec 12 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-23.rc4.git1d3ab6d
|
|
|
efbbe3 |
- Resolves: #1524654
|
|
|
efbbe3 |
|
|
|
efbbe3 |
* Sun Dec 10 2017 Dan Walsh <dwalsh@redhat.name> - 1.0.0-22.rc4.git1d3ab6d
|
|
|
efbbe3 |
- Many Stability fixes
|
|
|
efbbe3 |
- Many fixes for rootless containers
|
|
|
efbbe3 |
- Many fixes for static builds
|
|
|
efbbe3 |
|
|
|
f24a48 |
* Thu Nov 09 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-21.rc4.dev.gitaea4f21
|
|
|
f24a48 |
- enable debuginfo and include -buildmode=pie for go build
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue Nov 07 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-20.rc4.dev.gitaea4f21
|
|
|
f24a48 |
- use Makefile
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue Nov 07 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-19.rc4.dev.gitaea4f21
|
|
|
f24a48 |
- disable debuginfo temporarily
|
|
|
f24a48 |
|
|
|
f24a48 |
* Fri Nov 03 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-18.rc4.dev.gitaea4f21
|
|
|
f24a48 |
- enable debuginfo
|
|
|
f24a48 |
|
|
|
f24a48 |
* Wed Oct 25 2017 Dan Walsh <dwalsh@redhat.name> - 1.0.0-17.rc4.gitaea4f21
|
|
|
f24a48 |
- Add container-selinux prerequires to make sure runc is labeled correctly
|
|
|
f24a48 |
|
|
|
f24a48 |
* Thu Oct 19 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-16.rc4.dev.gitaea4f21
|
|
|
f24a48 |
- correct the release tag "rc4dev" -> "rc4.dev" cause I'm OCD
|
|
|
f24a48 |
|
|
|
f24a48 |
* Mon Oct 16 2017 Dan Walsh <dwalsh@redhat.com> - 1.0.0-15.rc4dev.gitaea4f21
|
|
|
f24a48 |
- Use the same checkout as Fedora for lates CRI-O
|
|
|
f24a48 |
|
|
|
f24a48 |
* Fri Sep 22 2017 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-14.rc4dev.git84a082b
|
|
|
f24a48 |
- rebase to 84a082bfef6f932de921437815355186db37aeb1
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue Jun 13 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-13.rc3.gitd40db12
|
|
|
f24a48 |
- Resolves: #1479489
|
|
|
f24a48 |
- built commit d40db12
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue Jun 13 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-12.1.gitf8ce01d
|
|
|
f24a48 |
- disable s390x temporarily because of indefinite wait times on brew
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue Jun 13 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-11.1.gitf8ce01d
|
|
|
f24a48 |
- correct previous bogus date :\
|
|
|
f24a48 |
|
|
|
f24a48 |
* Mon Jun 12 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-10.1.gitf8ce01d
|
|
|
f24a48 |
- Resolves: #1441737 - run sysctl_apply for sysctl knob
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue May 09 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-9.1.gitf8ce01d
|
|
|
f24a48 |
- Resolves: #1447078 - change default root path
|
|
|
f24a48 |
- add commit e800860 from runc @projectatomic/change-root-path
|
|
|
f24a48 |
|
|
|
f24a48 |
* Fri May 05 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-8.1.gitf8ce01d
|
|
|
f24a48 |
- Resolves: #1441737 - enable kernel sysctl knob /proc/sys/fs/may_detach_mounts
|
|
|
f24a48 |
|
|
|
f24a48 |
* Thu Apr 13 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-7.1.gitf8ce01d
|
|
|
f24a48 |
- Resolves: #1429675
|
|
|
f24a48 |
- built @opencontainers/master commit f8ce01d
|
|
|
f24a48 |
|
|
|
f24a48 |
* Thu Mar 16 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-4.1.gitee992e5
|
|
|
f24a48 |
- built @projectatomic/master commit ee992e5
|
|
|
f24a48 |
|
|
|
f24a48 |
* Fri Feb 24 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-3.rc2
|
|
|
f24a48 |
- Resolves: #1426674
|
|
|
f24a48 |
- built projectatomic/runc_rhel_7 commit 5d93f81
|
|
|
f24a48 |
|
|
|
f24a48 |
* Mon Feb 06 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-2.rc2
|
|
|
f24a48 |
- Resolves: #1419702 - rebase to latest upstream master
|
|
|
f24a48 |
- built commit b263a43
|
|
|
f24a48 |
|
|
|
f24a48 |
* Wed Jan 11 2017 Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-1.rc2
|
|
|
f24a48 |
- Resolves: #1412239 - *CVE-2016-9962* - set init processes as non-dumpable,
|
|
|
f24a48 |
runc patch from Michael Crosby <crosbymichael@gmail.com>
|
|
|
f24a48 |
|
|
|
f24a48 |
* Wed Sep 07 2016 Lokesh Mandvekar <lsm5@redhat.com> - 0.1.1-6
|
|
|
f24a48 |
- Resolves: #1373980 - rebuild for 7.3.0
|
|
|
f24a48 |
|
|
|
f24a48 |
* Sat Jun 25 2016 Lokesh Mandvekar <lsm5@redhat.com> - 0.1.1-5
|
|
|
f24a48 |
- build with golang >= 1.6.2
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue May 31 2016 Lokesh Mandvekar <lsm5@redhat.com> - 0.1.1-4
|
|
|
f24a48 |
- release tags were inconsistent in the previous build
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue May 31 2016 Lokesh Mandvekar <lsm5@redhat.com> - 0.1.1-1
|
|
|
f24a48 |
- Resolves: #1341267 - rebase runc to v0.1.1
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue May 03 2016 Lokesh Mandvekar <lsm5@redhat.com> - 0.1.0-3
|
|
|
f24a48 |
- add selinux build tag
|
|
|
f24a48 |
- add BR: libseccomp-devel
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue May 03 2016 Lokesh Mandvekar <lsm5@redhat.com> - 0.1.0-2
|
|
|
f24a48 |
- Resolves: #1328970 - add seccomp buildtag
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue Apr 19 2016 Lokesh Mandvekar <lsm5@redhat.com> - 0.1.0-1
|
|
|
f24a48 |
- Resolves: rhbz#1328616 - rebase to v0.1.0
|
|
|
f24a48 |
|
|
|
f24a48 |
* Tue Mar 08 2016 Lokesh Mandvekar <lsm5@redhat.com> - 0.0.8-1.git4155b68
|
|
|
f24a48 |
- Resolves: rhbz#1277245 - bump to 0.0.8
|
|
|
f24a48 |
- Resolves: rhbz#1302363 - criu is a runtime dep
|
|
|
f24a48 |
- Resolves: rhbz#1302348 - libseccomp-golang is bundled in Godeps
|
|
|
f24a48 |
- manpages included
|
|
|
f24a48 |
|
|
|
f24a48 |
* Wed Nov 25 2015 jchaloup <jchaloup@redhat.com> - 1:0.0.5-0.1.git97bc9a7
|
|
|
f24a48 |
- Update to 0.0.5, introduce Epoch for Fedora due to 0.2 version instead of 0.0.2
|
|
|
f24a48 |
|
|
|
f24a48 |
* Fri Aug 21 2015 Jan Chaloupka <jchaloup@redhat.com> - 0.2-0.2.git90e6d37
|
|
|
f24a48 |
- First package for Fedora
|
|
|
f24a48 |
resolves: #1255179
|